PatchTheCVECVE-2005-0206: The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit ar
48
This month
HIGH 7.5DOWNGRADEDOWNGRADEDOWNGRADE
CVE-2005-0206 is a high-severity flaw (CVSS 7.5) affecting ptex, cstetex, cups. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.5 (High) |
| EPSS exploit chance | 3.0% (top 13%) |
| CISA exploited list | No |
| Published | 2005-04-27 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
ascii ptex DOWNGRADE
Affected: 3.1.4
Fixed in: no fixed release known
Safe to downgrade to: a release before 3.1.4
1. Check installed version
apt-cache policy ptex || rpm -q ptex || ptex --version
2. No fixed release: DOWNGRADE to a release before 3.1.4 (Debian / Ubuntu)
apt-cache madison ptex
sudo apt install ptex=<VERSION_BEFORE_3.1.4>
sudo apt-mark hold ptex
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list ptex
sudo dnf downgrade ptex-<VERSION_BEFORE_3.1.4>
sudo dnf versionlock add ptex
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
cstex cstetex DOWNGRADE
Affected: 2.0.2
Fixed in: no fixed release known
Safe to downgrade to: a release before 2.0.2
1. Check installed version
apt-cache policy cstetex || rpm -q cstetex || cstetex --version
2. No fixed release: DOWNGRADE to a release before 2.0.2 (Debian / Ubuntu)
apt-cache madison cstetex
sudo apt install cstetex=<VERSION_BEFORE_2.0.2>
sudo apt-mark hold cstetex
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list cstetex
sudo dnf downgrade cstetex-<VERSION_BEFORE_2.0.2>
sudo dnf versionlock add cstetex
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
easy software products cups DOWNGRADE
Affected: 1.0.4 · 1.0.4_8 · 1.1.1 · 1.1.4 · 1.1.4_2 · 1.1.4_3 · 1.1.4_5 · 1.1.6
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0.4
1. Check installed version
apt-cache policy cups || rpm -q cups || cups --version
2. No fixed release: DOWNGRADE to a release before 1.0.4 (Debian / Ubuntu)
apt-cache madison cups
sudo apt install cups=<VERSION_BEFORE_1.0.4>
sudo apt-mark hold cups
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list cups
sudo dnf downgrade cups-<VERSION_BEFORE_1.0.4>
sudo dnf versionlock add cups
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
gnome gpdf DOWNGRADE
Affected: 0.110 · 0.112 · 0.131
Fixed in: no fixed release known
Safe to downgrade to: a release before 0.110
1. Check installed version
apt-cache policy gpdf || rpm -q gpdf || gpdf --version
2. No fixed release: DOWNGRADE to a release before 0.110 (Debian / Ubuntu)
apt-cache madison gpdf
sudo apt install gpdf=<VERSION_BEFORE_0.110>
sudo apt-mark hold gpdf
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list gpdf
sudo dnf downgrade gpdf-<VERSION_BEFORE_0.110>
sudo dnf versionlock add gpdf
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
kde koffice DOWNGRADE
Affected: 1.3 · 1.3.1 · 1.3.2 · 1.3.3 · 1.3_beta1 · 1.3_beta2 · 1.3_beta3
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.3
1. Check installed version
apt-cache policy koffice || rpm -q koffice || koffice --version
2. No fixed release: DOWNGRADE to a release before 1.3 (Debian / Ubuntu)
apt-cache madison koffice
sudo apt install koffice=<VERSION_BEFORE_1.3>
sudo apt-mark hold koffice
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list koffice
sudo dnf downgrade koffice-<VERSION_BEFORE_1.3>
sudo dnf versionlock add koffice
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
kde kpdf DOWNGRADE
Affected: 3.2
Fixed in: no fixed release known
Safe to downgrade to: a release before 3.2
1. Check installed version
apt-cache policy kpdf || rpm -q kpdf || kpdf --version
2. No fixed release: DOWNGRADE to a release before 3.2 (Debian / Ubuntu)
apt-cache madison kpdf
sudo apt install kpdf=<VERSION_BEFORE_3.2>
sudo apt-mark hold kpdf
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list kpdf
sudo dnf downgrade kpdf-<VERSION_BEFORE_3.2>
sudo dnf versionlock add kpdf
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2005-0206?
ptex: downgrade or apply the listed mitigation; cstetex: downgrade or apply the listed mitigation; cups: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2005-0206 being exploited?
CVE-2005-0206 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2005-0206 affect?
CVE-2005-0206 affects ptex, cstetex, cups. Severity is high (CVSS 7.5). The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
How urgent is CVE-2005-0206?
Priority 48/100. High severity
Related CVEs
- CVE-2018-3835 HIGH 8.8 DOWNGRADE An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping applica